Cloudflare MCP for AI agents
Agents read Cloudflare MCP at once. Changes and sends are held for a person's approval by default.
About Cloudflare MCP
Manage Cloudflare accounts, zones, Workers, DNS, security, storage, and other platform resources through Cloudflare's hosted MCP server.
What an agent can do in Cloudflare MCP
Every Cloudflare MCP action is classed by the platform as a read, a change or a send. Reads run at once. Changes and sends are held for a person by default.
Runs at once (reads)
Looks things up in Cloudflare MCP without asking first. 1 action.
- SearchSearch the Cloudflare OpenAPI spec. All $refs are pre-resolved inline. Products: cloudforce-one, access, magic, workers, dlp, email-security, realtime, devices, ai-gateway, email, intel, gateway, stre
Held for approval by default (changes and sends)
Held for a person's approval by default. The approval is recorded and the action is sent once, never twice, with 10 seconds to undo. 2 actions.
- DocsSearch the Cloudflare documentation. This tool should be used to answer any question about Cloudflare products or features, including: - Workers, Pages, R2, Images, Stream, D1, Durable Objects, KV, Wo
- ExecuteExecute JavaScript code that can read, create, update, or delete resources through the Cloudflare API. First use the 'search' tool to find the right endpoints, then write code using the cloudflare.req
Changes wait in Needs you
Changes and sends in Cloudflare MCP are held for a person's approval by default. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.
Related connectors
Cloudflare MCP questions
Can an agent change data in Cloudflare MCP on its own?
Not by default. Changes and sends in Cloudflare MCP are held for a person's approval. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.
What can an agent read in Cloudflare MCP?
This connector lists 1 read action. Reads run at once, without waiting for approval.
How does Cloudflare MCP connect?
It connects with dcr oauth. Connectors are built and maintained by third-party developers; availability is confirmed during scoping.